-
-
Notifications
You must be signed in to change notification settings - Fork 997
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
website/integrations: gitlab to have binding in saml section be post #12677
Conversation
After upgrading to version 2024.12.2 SAML stopped working in gitlab and was causing 502 errors. After some troubleshooting I finally got it to work again by changing binding to "Post" instead of the recommended "Redirect" in this howto. Signed-off-by: Nestor N. Camacho III <ncamacho@gmail.com>
✅ Deploy Preview for authentik-docs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
After upgrading to version 2024.12.2 SAML stopped working in gitlab and was causing 502 errors. After some troubleshooting I finally got it to work again by changing binding to "Post" instead of the recommended "Redirect" in this howto. |
✅ Deploy Preview for authentik-storybook canceled.
|
Thank you so much @ncamacho for this PR; we will have a quick look at why Redirect was failing, and see if we need to add more info to the docs. |
Codecov ReportAll modified and coverable lines are covered by tests ✅
Additional details and impacted files@@ Coverage Diff @@
## main #12677 +/- ##
==========================================
- Coverage 92.71% 91.67% -1.05%
==========================================
Files 769 769
Lines 38884 38884
==========================================
- Hits 36052 35646 -406
- Misses 2832 3238 +406
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Sentry. |
You're welcome!
Thank you,
Nes++
…On Tue, Jan 14, 2025 at 5:45 PM Tana M Berry ***@***.***> wrote:
Thank you so much @ncamacho <https://github.com/ncamacho> for this PR; we
will have a quick look at why Redirect was failing, and see if we need to
add more info to the docs.
—
Reply to this email directly, view it on GitHub
<#12677 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABWWFBGHGSIC7D5OJD6FZ32KW4VLAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJRGQ3DCMRYHA>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
@ncamacho do you have both sign assertions and sign responses enabled in the SAML provider? |
Yes, I do.
[image: image.png]
Nes++
…On Thu, Jan 16, 2025 at 10:09 AM Jens L. ***@***.***> wrote:
@ncamacho <https://github.com/ncamacho> do you have both sign assertions
and sign responses enabled in the SAML provider?
—
Reply to this email directly, view it on GitHub
<#12677 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
Thanks for letting us know @ncamacho . I think we need to add more context around this... not specify one or the other setting, because it seems that both might work in diff situations? |
Are you saying, that if I were to disable those two and put it back to
"Redirect" it would work?
Nes++
On Wed, Jan 22, 2025 at 8:49 AM Tana M Berry ***@***.***>
wrote:
… Yes, I do. [image: image.png] Nes++
… <#m_3744106224942584800_>
On Thu, Jan 16, 2025 at 10:09 AM Jens L. *@*.*> wrote: @ncamacho
<https://github.com/ncamacho> https://github.com/ncamacho
<https://github.com/ncamacho> do you have both sign assertions and sign
responses enabled in the SAML provider? — Reply to this email directly,
view it on GitHub <#12677 (comment)
<#12677 (comment)>>,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA
<https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA>
. You are receiving this because you were mentioned.Message ID: @.*>
Thanks for letting us know @ncamacho <https://github.com/ncamacho> . I
think we need to add more context around this... not specify one or the
other setting, because it seems that both might work in diff situations?
—
Reply to this email directly, view it on GitHub
<#12677 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABWWFAWHNKIS6GQRKI3UG32L7DX3AVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMBXG42TKMJUGM>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
I'll need @BeryJu to answer this one. ;-) |
Ok, I just tried "Redirect" with "Sign assertions" enabled and "Sign
responses" disabled, then I tried the inverse of that while still keeping
it on "Redirect" neither one worked. It looks like you can't disable both
assertions and responses as the UI prevents that. Hope that helps! Putting
it back on "Post" put things back to working for me.
Thank you,
Nes++
On Thu, Jan 23, 2025 at 8:23 PM Tana M Berry ***@***.***>
wrote:
… Are you saying, that if I were to disable those two and put it back to
"Redirect" it would work? Nes++ On Wed, Jan 22, 2025 at 8:49 AM Tana M
Berry *@*.
*> wrote: … <#m_1675871180744362835_> Yes, I do. [image: image.png] Nes++
… <#m_3744106224942584800_> On Thu, Jan 16, 2025 at 10:09 AM Jens L. @.>
wrote: @ncamacho <https://github.com/ncamacho> https://github.com/ncamacho
<https://github.com/ncamacho> https://github.com/ncamacho
<https://github.com/ncamacho> https://github.com/ncamacho
<https://github.com/ncamacho> do you have both sign assertions and sign
responses enabled in the SAML provider? — Reply to this email directly,
view it on GitHub <#12677
<#12677> (comment) <#12677
(comment)
<#12677 (comment)>>>,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA
<https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA>
https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA
<https://github.com/notifications/unsubscribe-auth/AABWWFDDNTZOQ3LTHNXRBJ32K7YXNAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDKOJWGM4DMOJVGA>
. You are receiving this because you were mentioned.Message ID: @.> Thanks
for letting us know @ncamacho <https://github.com/ncamacho>
https://github.com/ncamacho <https://github.com/ncamacho> . I think we need
to add more context around this... not specify one or the other setting,
because it seems that both might work in diff situations? — Reply to this
email directly, view it on GitHub <#12677 (comment)
<#12677 (comment)>>,
or unsubscribe
https://github.com/notifications/unsubscribe-auth/AABWWFAWHNKIS6GQRKI3UG32L7DX3AVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMBXG42TKMJUGM
<https://github.com/notifications/unsubscribe-auth/AABWWFAWHNKIS6GQRKI3UG32L7DX3AVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMBXG42TKMJUGM>
. You are receiving this because you were mentioned.Message ID: @.***>
I'll need @BeryJu <https://github.com/BeryJu> to answer this one. ;-)
—
Reply to this email directly, view it on GitHub
<#12677 (comment)>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AABWWFCL7TIAW74KUCYRIBD2MG54LAVCNFSM6AAAAABVGARMW2VHI2DSMVQWIX3LMV43OSLTON2WKQ3PNVWWK3TUHMZDMMJRGU2DAOBQGQ>
.
You are receiving this because you were mentioned.Message ID:
***@***.***>
|
After upgrading to version 2024.12.2 SAML stopped working in gitlab and was causing 502 errors. After some troubleshooting I finally got it to work again by changing binding to "Post" instead of the recommended "Redirect" in this howto.
Details
REPLACE ME
Checklist
ak test authentik/
)make lint-fix
)If an API change has been made
make gen-build
)If changes to the frontend have been made
make web
)If applicable
make website
)